Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium6.5SAP NetWeaver XML External Entity (XXE) VulnerabilityPatch nowKEVEPSS 24.23%Nov 22, 2016
- High7.5Siemens SIMATIC CP 1543-1 Improper Privilege Management VulnerabilityPatch nowKEVEPSS 3.61%Nov 18, 2016
- Medium5.5libxml2 2.9.4 and earlier, as used in XMLSec 1.2.23 and earlier and other products, does not offer a flag directly indicating that the current document may be read but…Check if you run itEPSS 2.94%Nov 16, 2016
- UnknownJenkins Jenkins Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')Patch nowKEVEPSS 96.94%Nov 16, 2016
- UnknownUnix Distributions Account Credentials VulnerabilityPatch nowKEVEPSS 53.34%Nov 11, 2016
- Medium5.5Microsoft Office 2007 SP3 allows remote attackers to cause a denial of service (application hang) via a crafted Office document, aka "Microsoft Office Denial of Servic…Check this weekEPSS 16.48%Nov 10, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 80.00%Nov 9, 2016
- High8.8Microsoft Edge Memory Corruption VulnerabilityPatch nowKEVEPSS 82.78%Nov 9, 2016
- High8.8Microsoft Windows Open Type Font Remote Code Execution VulnerabilityPatch nowKEVEPSS 64.59%Nov 8, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 81.14%Oct 28, 2016
- UnknownJoomla! Joomla! Improper Input ValidationPatch nowKEVEPSS 97.25%Oct 28, 2016
- Medium6.3Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows local users to affect confidentia…Check if you run itEPSS 0.40%Oct 25, 2016
- Medium6.4Unspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability via…Check if you run itEPSS 0.36%Oct 25, 2016
- Critical9.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, 12.2.1.0, and 12.2.1.1 allows remote attackers to aff…Check if you run itEPSS 5.08%Oct 25, 2016
- Critical9.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confid…Check if you run itEPSS 5.08%Oct 25, 2016
- Medium6.4Unspecified vulnerability in the RDBMS Security component in Oracle Database Server 12.1.0.2 allows local users to affect confidentiality, integrity, and availability…Check if you run itEPSS 0.34%Oct 25, 2016
- Medium5.3CVE-2016-5488 is listed by oracle.Check if you run itEPSS 3.52%Oct 25, 2016
- Critical9.8Unspecified vulnerability in the Oracle Web Services component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, and 12.2.1.0.0 allows remote attackers t…Check if you run itEPSS 5.50%Oct 25, 2016
- High8.8Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote authenticated users to aff…Check if you run itEPSS 5.70%Oct 25, 2016
- High8.8Adobe Flash Player Use-After-Free VulnerabilityPatch nowKEVEPSS 25.20%Oct 21, 2016
- High7.8Microsoft Win32k Privilege Escalation VulnerabilityPatch nowKEVEPSS 80.97%Oct 21, 2016
- High7.0Linux Kernel Race Condition VulnerabilityPatch nowKEVEPSS 83.52%Oct 18, 2016
- UnknownOpenSSH 'AllowTcpForwarding' Port Bounce VulnerabilityPatch nowKEVEPSS 11.27%Oct 12, 2016
- High7.8Microsoft Office Memory Corruption VulnerabilityPatch nowKEVEPSS 57.58%Oct 11, 2016
- High7.8Microsoft Windows Graphics Device Interface (GDI) Remote Code Execution VulnerabilityPatch nowKEVEPSS 68.47%Oct 11, 2016
Sort